Index

Symbols

3rd normal form (3NF) 227

7 Rs, cloud migration pattern

refactor in cloud 80, 81

rehost in cloud 79, 80

relocate to cloud 82

re-platform in cloud 80

repurchase, in cloud 81

retain on-premise 82

retire 82, 83

revise, before migrating to cloud 81

A

Accelerated Computing instances

DLI 189

F1 instance 189

G family instance 189

P family instance 189

Trn1 190

VT1 190

Access Control List (ACL) 558

ACID model

atomicity 225

consistency 225

durability 225

isolation 225

A Cloud Guru 54

URL 55

active/active architecture 99

active architecture 97

Active Node 97

active/passive architecture 97-99

drawback 98

Advanced Query Accelerator (AQUA) 400

AI services 430

all up-front (AURI) 350

Amazon Athena 404, 405

Apache Avro files 406

Apache Parquet files 406, 407

CSV files 405

data lake, querying with 403, 404

JSON files 405

ORC files 405

versus Redshift Spectrum 421, 422

workgroups 412

working 407, 408

Amazon Athena Federated Query

data source connectors 410, 411

using 409, 410

Amazon Athena optimization 412

approximation functions 421

columnar data store generation optimization 417, 418

column selection 418

data bucketing 414

data partitions 413

file compression 415

file size optimization 416, 417

Group by clause optimization 420

join optimization 420

ORDER BY clause optimization 419

predicate pushdown 418, 419

Amazon Audit Manager 306

reference link 306

Amazon Aurora 231, 234

features 234-236

use cases 236, 237

Amazon Chime 70

Amazon CloudFront 160

reference link 126

rules, for content distribution 125

using 124

Amazon CloudWatch 294, 322, 324

features 323

reference link 294

Amazon CloudWatch Events 324

rules 324

Amazon Cognito 276, 291

features 292

reference link 292

Amazon Comprehend 443

advantages 444

Amazon Connect 69

Amazon DevOps Guru 239

Amazon Dynamo DB Table

defining 241, 242

Global Secondary Index (GSI) 243, 244

keys 241

Local Secondary Index (LSI) 242

read capacity unit (RCU) 241

write capacity unit (WCU) 241

Amazon ElastiCache 160, 230

Redis, versus Memcached 249, 250

Amazon Elastic Block Store (EBS) 142

cold HDD 144, 145

general-purpose Solid-State Devices (SSDs) 143

provisioned IOPS SSD 143

Snapshots 145

throughput Optimized HDD 144

volume, selecting 146, 147

Amazon Elastic Compute Cloud (EC2) 181, 182, 320

advantages 183-185

Amazon Machine Images (AMI) 194, 195

AWS Compute Optimizer 193, 194

best practices, reviewing 195

instance families 185

for ML workloads 320

pricing model 191-193

Amazon Elastic Container Registry (ECR) 481

Amazon Elastic Container Service (ECS) 458, 476

Amazon ECS cluster 478

Amazon ECS service 477, 478

architecture 476, 477

components 477

ECS container instance 477

task 477

Amazon Elastic File System (EFS)

investigating 148, 149

key benefits 148, 149

reference link 149

use cases 148

Amazon Elastic Inference 432

Amazon Elastic Kubernetes Service (EKS) 74, 482, 489

add-ons 496

automatic version upgrades 495

Bring Your Operating System (BYOS) 492

community tools support 496

control plane 490, 491

EC2 runtime options 491, 492

Kubernetes application scaling 493

PrivateLink support 495

security 494, 495

Amazon Elastic Map Reduce (EMR) 355, 357

clusters and nodes 356

data securing 359- 361

EMR Studio 359

file system 358

versus AWS Glue 379, 380

Amazon EMR Serverless 357

Amazon EventBridge 324

Amazon Forecast 445

Amazon FSx

using, to manage file systems 149, 150

Amazon FSx File Gateway 174

Amazon GuardDuty 293-295

reference link 295

Amazon Inspector 293, 296

reference link 296

Amazon Keyspaces 257

reference link 258

Amazon Kinesis 527

versus Amazon MSK 390-392

Amazon Kinesis Video Streams (KVS) 384

Amazon Lex 444

Amazon Machine Image (AMI) 194, 195, 478

Amazon Macie 299, 300

reference link 301

Amazon Managed Blockchain (AMB) 457

use cases 458

Amazon Managed Service for Grafana (AMG) 340

Amazon Managed Service for Prometheus (AMSP) 340

benefits 340

reference link 340

Amazon Managed Streaming for Kafka (MSK) 527

versus Amazon Kinesis 390-392

Amazon MQ 527

Amazon MSK API

reference link 386

Amazon MSK cluster architecture 386, 388

data storage 387

Kafka clusters 387

networking 387

producers and consumers 387

Zookeeper 387

Amazon Neptune 252

reference link 252

Amazon Personalize 445

Amazon Polly 442

Amazon Quantum Ledger Database (QLDB) 255

examples 255

reference link 256

Amazon QuickSight 70, 423

dashboard 424

data visualization 422

used, for analyzing data 423

Amazon RDS 74, 230, 231

Amazon Aurora 231, 234-237

Amazon DevOps Guru 239

Amazon RDS Proxy 237, 238

benefits 231-233

community 231

Amazon RDS Custom 230

Amazon RDS Proxy 237

benefits 237, 238

reference link 238

Amazon Redshift 395

architecture 395-398

components 398

compute nodes 398

data sharing 398

features 400

leader node 398

materialized views (MVs) 399

node types 399

Spectrum nodes 398

using, for data transforming in AWS 395

versus on-premises data warehouses 396

workloads, optimizing 402, 403

Amazon Redshift ML 401

Amazon Redshift Serverless 401

Amazon Redshift workload

columnar storage, using 402

Materialized Views (MVs), using 402

query optimization techniques, using 402

Redshift Spectrum, using 402

right node type, using 402

sort keys and distribution keys, using 402

Amazon Rekognition 441

Amazon Resource Name (ARN) 283

Amazon S3

best practices 159

bucket/prefix naming convention 161, 162

cost optimization 170-172

Multi-Destination Replication 157, 158

versioning 156, 157

Amazon S3 best practices

access 195

cost optimization 170-172

data, protecting 162, 163

EC2 backup 198

limit management 197

performance, enhancing 159

recovery 198

resource management 196, 197

snapshots 198

storage 196

Amazon S3 File Gateway 173, 174

Amazon S3 Glacier 154, 155

Amazon S3 Intelligent-Tiering 152

Amazon S3 One Zone-IA 153

Amazon S3 server-side encryption (SSE) 318

Amazon S3 Standard-IA (Infrequent Access) 153

Amazon S3 Transfer Acceleration 161

benefits 161

Amazon SageMaker 433, 435

Amazon SageMaker Debugger 438

Amazon SageMaker Experiments 438

Amazon SageMaker for MLOps

reference link 447

Amazon SageMaker Model Training

reference link 438

Amazon SageMaker Pipelines 438

Amazon Simple Notification Service (SNS) 519, 527

Amazon Simple Queue Service (SQS) 518, 527

Amazon Simple Storage Service (S3) 150

attributes 151

data, managing with S3 Object Lambda 156

Glacier 154, 155

Intelligent-Tiering 152

One Zone-IA 153

S3 Standard 151, 152

Standard-IA (Infrequent Access) 153

Amazon Textract 441

Amazon Timestream 253, 254

reference link 254

Amazon Transcribe 442, 443

Amazon Translate 443

Amazon Virtual Private Cloud (VPC) 112

Classless Inter-Domain Routing (CIDR) blocks 112

DHCP option sets 114

Egress-only IGWs 114

Internet Gateway (IGW) 113

Network Access Control List (NACL) 113, 114

Network Address Translation (NAT) gateways 113

route tables 113

Security Groups (SGs) 113

subnets 112

VPC Flow Logs 114

Amazon VPC Flow Logs 293

reference link 294

Amazon Web Services (AWS) 7, 8

architecture, building 578-580

Artificial Intelligence (AI) 430

benefits 14

blockchain 457, 458

compute 180, 181

databases, migrating to 265-267

data lake, with Lake Formation in 552-554

data mesh 569-572

DevOps 612-615

documentation link 146

hybrid cloud connectivity, building 128-134

influence and adoption 9, 10

Internet of Things (IoT) applications, building 448, 449

lakehouse 568, 569

Machine Learning (ML) 430

market share 9, 10

working with 54

terminology 10-13

Amazon Web Services (AWS), benefits

availability 20, 22

elasticity and scalability 14-18

faster hardware cycles 23, 24

security 18

system administration staff 24

Amazon WorkSpaces 70

American National Standards Institute (ANSI) 10

Amplify CLI 336

Amplify Hosting 335

Amplify Libraries 335

Amplify Studio 335

Apache Airflow

reference link 369

Apache Avro 406

Apache Flink 384

Apache Kafka 385, 386

Apache MXNet 432

Apache Parquet 406

App2Container (A2C) service 503

reference link 503

application architectures 95, 96

active/Active architecture 99

active architecture 97

active/passive architecture 97-99

sharding architecture 99, 100

types 96

Application Programming Interfaces (API) 506

Application Load Balancer (ALB) 202, 205

features 205

versus CLB 207

versus NLB 207

artificial general intelligence 429

Artificial Intelligence (AI)

in AWS 429, 430

Artificial Intelligence (AI), types

general AI 429

limited memory 429

Narrow AI 429

reactive machines 429

self-aware 429

Theory of Mind 429

associate-level certifications 59

asynchronous replication 98

authentication and authorization

implementing, for end users 597-601

automated ML 430

auto-scaling

reference link 184

Availability Zone (AZ) 109, 145, 478

Aviatrix 139

AWS AI services 440

chatbots 444

forecasting 445

language 443, 444

recommendations 445, 446

speech 442, 443

vision 441, 442

AWS Amplify 335-337

reference link 337

AWS analytic services

implementing 424, 425

AWS Artifact 306, 307

reference link 307

AWS Artifact Agreements 307

AWS Artifact Reports 307

AWS Audit Manager 325

reference link 326

AWS Backup 176

use cases 176

AWS Billing Conductor 349

AWS Braket

quantum computing with 458-460

AWS Certificate Manager (ACM) 300, 302

reference link 303

AWS certifications

building 46

frequently asked questions 58-62

online courses 54

practice exam websites 55

preparation approach 57, 58

tips and tricks, for obtaining 51-53

AWS Certified Cloud Practitioner-Foundational 47

AWS Certified Solutions Architect

Associate 47

Professional 48

AWS Cloud Adoption Framework (AWS CAF) 93-95

align phase 94

envision phase 94

launch phase 94

reference link 94

scale phase 94

AWS Cloud Developer path 49

AWS Certified Developer - Associate 49

AWS Cloud Development Kit (CDK) 333, 334, 581

AWS Cloud DevOps Engineer path

AWS Certified DevOps Engineer - Professional 48

AWS Certified SysOps Administrator - Associate 48

Professional 48

AWS CloudFormation 330, 331

reference link 331

AWS CloudHSM 299, 301

reference link 302

AWS cloud network security 135, 136

AWS CloudTrail 293, 318, 319

reference link 293, 319

AWS Cloud WAN 133, 134

AWS CloudWatch 338

AWS Command Line Interface (CLI)

installing 584, 585

reference link 584

AWS Compute Optimizer 193

benefits 193

AWS Config 293, 306, 319

evaluate 320

record 319

reference link 293

visualize 320, 321

AWS container services

comparing 501, 502

selecting 501

AWS Control Tower 290, 316

reference link 290

AWS Cost Anomaly Detection 348

AWS Cost Explorer 348

AWS database services 229, 230

benefits 258

Graph databases 250

ide-column store databases 256

In-Memory Database 247

ledger database (LDB) 254

legacy databases, moving on from 261

modern applications, building with purpose-built databases 259, 260

moving, to fully managed database services 258, 259

NoSQL databases 239

relational databases 230

time-series database (TSDB) 252, 253

AWS Direct Connect 130, 131, 132

AWS Direct Connect interface types

private virtual interface 131

public virtual interface 131

transit virtual interface 131

AWS Directory Service 276, 288, 289

AWS Elastic Beanstalk 74

AWS Encryption SDK 306

AWS EventBridge 519, 528

AWS Fargate 497

advantages 213

benefits 497

example 497

serverless computing 212, 213

versus EC2 498

AWS Firewall Manager 296, 297

reference link 298

AWS Global Accelerator (AGA) 126, 127

AWS Global Infrastructure 106

AWS AZs 109

AWS LZs 110

AWS Regions 108

benefits 110, 111

AWS Glue 361, 362

classifiers, categorizing 367

components 363

crawlers 366

use cases 363

versus Amazon EMR 379, 380

AWS Glue, best practices 372

Apache Spark UI, using 375

code generators, generating 367-369

components, implementing 371, 372

data partitioning 376, 377

data partitioning, to Amazon S3 377-379

file splitting, optimization 373

files, processing 375, 376

pushdown, predicating 376, 377

worker type, selecting 373

YARN memory overhead allocation 374

AWS Glue classifiers

categorizing 366, 367

AWS Glue console

operating 363

AWS Glue crawlers 365

AWS Glue DataBrew 370, 371

AWS Glue Data Catalog

operating 364

AWS Glue DynamicFrame classes 373

AWS Glue serverless streaming ETL 370

AWS GovCloud 108

AWS Graviton 182, 183

AWS Hybrid Cloud services 216

AWS IaaS services

examples 67

AWS Identity and Access Management (IAM) 276, 306, 482, 561

benefits 289, 290

IAM roles 280-282

IAM user groups 278, 279

IAM users 278

identities 277

permissions 277-285

policies 282, 283

reference link 290

resources, managing 277

use cases 277

AWS Industrial IoT (IIoT) 455

AWS Inferentia 432

AWS infrastructure

creating 590-592

creating, with Cloudformation 593, 595

AWS IoT Analytics 451

data analysis 451

data collection 451

data pipeline automation 451

data storage 451

data visualization 451

AWS IoT applications

building, best practices 456

AWS IoT Core 449

components 449

AWS IoT Device Defender 452

AWS IoT Device Management 450

AWS IoT Greengrass 451, 452

AWS IoT SiteWise 453, 454

AWS IoT Things Graph 453

AWS IoT TwinMaker 454, 455

AWS Key Management Service (KMS) 299-301

reference link 301

AWS Lambda 74, 180

best practices 606

functions, writing 603-607

serverless computing 211

AWS License Manager 321, 322

reference link 322

AWS Managed Microsoft Active Directory 288, 289

AWS ML frameworks and infrastructure 432, 433

AWS ML services stack 430, 431

AWS monitoring services 530

reference link 530

AWS Network Firewall (ANFW) 136

AWS networking foundations 111

Amazon Virtual Private Cloud (VPC) 112-116

AWS PrivateLink 119-121

AWS TGW 116-118

AWS network security

anti-patterns 138, 139

patterns, best practices 137, 138

with third-party solutions 139, 140

AWS Organizations 285, 316

benefits 288

components 286

concepts 286

reference link 288

structure 287

AWS Outposts 216-218

AWS PaaS services

examples 74

AWS Partner Network (APN) 272, 304

AWS PrivateLink 119-121, 306

AWS Proton 333

reference link 333

AWS Purchase Order Management 347

AWS Regions 107, 108

reference link 109

AWS Resource Access Manager (RAM) 290

reference link 291

using 291

AWS SaaS solutions

examples 69, 70

AWS Savings Plans 345

AWS Secrets Manager 300, 303

reference link 303

AWS security 18

best practices 307-309

compliance standards support 19, 20

encryption 19

physical security 18

AWS Security Hub 293, 305

reference link 305

AWS security services 275

Compliance 275

Data Protection 275

Detective Controls 275

Identity and Access Management 275

Incident Response 275

Infrastructure Protection 275

AWS Service Catalog 330-332

reference link 332

AWS Service Catalog AppRegistry 332

AWS Service Management Connectors 331

AWS Session Token Service (STS) 280

AWS Shield 297, 298

Advanced 298

reference link 299

Standard 298

AWS Specialty Solutions Architect path 49

AWS Certified Advanced Networking - Specialty 49

AWS Certified Data Analytics - Specialty 51

AWS Certified Database - Specialty 50

AWS Certified Machine Learning - Specialty 50

AWS Certified SAP - Specialty 51

AWS Certified Security - Specialty 50

AWS Storage Gateway 172, 173

hybrid storage, building with 172

AWS Systems Manager 326-328, 341

AWS TGW 116-118

AWS Trainium 432

AWS Virtual Private Network (VPN) 128-130

AWS Wavelength 127

benefits 128

AWS Web Application Firewall (WAF) 296, 297

reference link 297

AWS whitepaper

reference link 384

B

bare-metal server 467

BASE model

basic availability 226

eventual consistency 226

soft-state 226

Batch 215

behavior-driven development (BDD) 542

big data analytics

cloud, using 354, 355

billing alert

AWS account, setting up with 582, 583

Binary JavaScript Object Notation (BSON) 245

Binary Large Objects (BLOBs) 240

blockchain 457

in AWS 457, 458

Bottlerocket 492

BrainCert

reference link 57

Business Analytics/Intelligence (BI) 73

Business Process Management (BPM) 73

Bzip2 416

C

cache aside pattern 248

change data capture (CDC) 227

chaos engineering 101-103

Check Point CloudGuard Network Security 139

CI/CD (Continuous Integration/Continuous Deployment) pipeline

building 612, 613

building, with AWS CodePipeline 613

Classic Load Balancer (CLB) 203, 204

IP Hash, using 203

Least Connections, using 203

Round Robin method, using 203

versus ALB 207

versus NLB 207

CLB, and ALB commonalities

connection draining 209

idle connection timeout 209

security groups 208

SSL termination 209

Cloud Adoption Readiness Tool (CART) 77

cloud computing 2-5

advantages 2

private, versus public clouds 5, 6

cloud computing models 63-65

IaaS 65

PaaS 71

SaaS 67

Cloud Financial Management (CFM) 345

Cloudformation

used, for creating AWS infrastructure 593, 595

cloud migration strategy 75, 76

7 Rs of cloud migration pattern 78

migration assessment tools 83

three-phase migration process 76

cloud operation (CloudOps) model 312

automation, advantages 313

automation, implementing 312

benefits 313

key pillars 314, 315

CloudOps pillars

application, observing 315, 337-340

Centralized Operations Management 341-344

cloud finance, managing 344

Compliance, enabling 314, 317, 318

governance, setting up 314-317

Manage and Control 346, 348

Optimize and Save 350, 351

Plan and Evaluate 345

provisioning & orchestration 328-330

Track and Allocate 348, 349

Cloud Practitioner certification 59

cloud storage

right type, selecting 158

CloudWatch alarms 323

Cluster Autoscaler 493

Cohesive Networks 140

column family databases 256

Command-Line Interface (CLI) 65, 581

Comma-Separated Values (CSV) 367

Commercial Cloud 9

compliance 271

Compound Annual Growth Rate (CAGR) 14

compute nodes, Redshift 398

slices 398

Compute Optimized instances

C family instance 188

Hpc6a instances 188

consumers 515

containerization 464, 465

Container Runtime Interface (CRI) 488

containers

advantages 465, 466

disadvantages 467, 468

versus virtual machines (VMs) 470-472

Containers as a Service (CaaS) 498

Content Delivery Network (CDN) 160

continuous integration and continuous deployment (CI/CD) 439, 467, 506

Control-M

reference link 369

Convertible RIs 192

core node 356

Cost and Usage Report (CUR) 349

cqlsh 257

Critical Data Element (CDE) 566

cross-site scripting (XSS) attacks 296

Customer Relationship Management (CRM) 69

D

DaemonSet 484

database attributes

defining 601-603

database consistency model 225

ACID model 225

BASE model 226

Database Migration Service (DMS) 246, 266

databases

data-driven innovation trends 223

history 222, 223

migrating, to AWS 265-267

selecting from 262-264

database usage model 227

Online Analytical Processing (OLAP) Systems 228, 229

Online Transaction Processing (OLTP) Systems 227, 228

Data Definition Language (DDL) 365

data-driven innovation trends

DevOps driving fast changes 224

micro-services change analytics requirements 224

surge of data 223

data ingestion

best practices 562, 563

data lake 395, 546, 547

benefits 548

best practices 554

building, components 549, 550

components 549

five V’s of big data, consideration 547

implementing, with zones 550-552

in AWS, with Lake Formation 552-554

key metrics 565-568

purpose 547-549

querying in AWS, with Amazon Athena 403, 404

versus data mesh architecture 572, 573

versus lakehouse 572, 573

data lake, best practices

cataloging 557-559

centralized data management 554

cost optimization 563

flexible data processing 564

governance 555, 556

ingestion 562, 563

monitoring, for performance optimization 564

quality control 559, 560

scalability 563

security 560-562

data lake governance

benefits 557

Data Manipulation Language (DML) 372

data mesh architecture

implementing, in AWS 571, 572

versus data lake and lakehouse 572, 573

data pre-processing 436

Data Processing Units (DPUs) 373

data protection

building 299

data protection, in Amazon S3 162, 163

Amazon Macie, using 168

Amazon S3 server access logging, turning on 167

AWS Config, enabling 166

AWS monitoring services 168

cross-region replication, leveraging 170

data at rest encryption, implementing 166

data-in-transit encryption, enabling 167

IAM Access Analyzer, leveraging 165

public access, blocking to buckets 163, 164

S3 API, leveraging 165

S3 Object Lock, implementing 166

VPC endpoints, using 168-170

wildcards, avoiding in policy files 164, 165

data protection services

Amazon Detective 304

Amazon Macie 299, 300

AWS Certificate Manager 300-304

AWS CloudHSM 299-302

AWS Key Management Service 299, 301

AWS Secrets Manager 300, 303

Server-Side Encryption (SSE) 300

data quality control

use cases 560

data security

best practices 560, 561

data streaming, in AWS

Amazon MSK cluster architecture 386-388

Apache Kafka 385, 386

data process, streaming with Amazon Kinesis 382

handling 380, 381

Kinesis Data Analytics (KDA) 383-385

Kinesis Data Firehose (KDF) 383

Kinesis Data Streams (KDS) 382

with Glue Schema Registry (GSR) 389

data visualization

with Amazon QuickSight 422-424

data warehouses, AWS

with Amazon Redshift 394, 395

Data Wrangler 436

DDD components

aggregate 538

context mapping 537

domain model 537

entity 538

factory 538

modules 539

repository 538

service 538

value object 538

DDD principles

bounded contexts 537

strategic design 537

ubiquitous language 536

deep learning 428

Dense Compute (DC) node types 399

Dense Storage (DS) node 400

Deployment, in Kubernetes 484

DevOps

in AWS 612-615

digital transformation 84-86

drivers 86, 87

examples 87

implementing 84

pitfalls 91-93

tips 87-90

Directed Acyclic Graphs (DAGs) 369, 375

Distributed Denial of Service (DDoS) 297

Docker components 473

Docker Compose 475

Docker Engine 475

Dockerfile 473

Docker Hub 474

Docker images 474

Docker run 474

Docker Swarm 475

Docker Swarm

versus Kubernetes 489

DocumentDB 244

advantages 246

need for 245

reference link 246

Domain-Driven Design (DDD) 532, 534, 576

abstraction 534

benefits 541, 542

challenges 542, 543

components 537-539

Context map diagram 577

domain definition 534-536

encapsulation 534

implementing, in AWS 539-541

inheritance 534

polymorphism 534

principles 536, 537

DynamicFrame

reference link 373

DynamoDB

using, best practices 603

DynamoDB Accelerator (DAX) 241

E

EBS volumes 196

EC2 Container Service (ECS) 206

EC2 instance families 185

Accelerated Computing (P4, G5, F1) 189, 190

Compute Optimized (C7, Hpc6a) 188

General Purpose (A1, M6, T4, Mac) 186, 187

Memory Optimized (R6, X2, High Memory) 190

reference link 186

Storage Optimized (H1, D3, I4) 190, 191

EC2 instances 476

EC2 P3 instances 215

e-commerce website

cart 541

customer 540

order 541

product 540

ECS Anywhere (ECS-A) 478

ECS components 479

networking 479

security 481

storage 480, 481

EDA models 516

event streaming model 516, 517

publish and subscribe model 518, 519

edge locations 124

Edge networking 122

Amazon CloudFront 124, 125

AWS Global Accelerator (AGA) 126, 127

AWS Wavelength 127, 128

Route 53 122-124

edges 250

EKS EC2 runtime options

managed node groups 492

self-managed node groups 491

EKS security

Amazon EKS Distro (EKS-D) 495

cluster security groups 495

encryption 495

IAM authentication 494

Kubernetes audit 495

Kubernetes RBAC 495

network isolation 494

Pod security policies 495

Elastic Block Storage (EBS) 67

Elastic Block Store (EBS) 145, 499

Elastic Compute Cloud (EC2) 355

versus AWS Fargate 498

Elastic Compute Cloud (EC2) instance 471

elastic computing 2

Elastic Container Service (ECS) 148, 180, 212

Elastic Fabric Adapter (EFA) 188, 215

Elastic File Storage (EFS) 67, 180

elasticity

uses 17, 18

Elastic Kubernetes Service (EKS) 148

Elastic Load Balancing (ELB) 199

Application Load Balancer (ALB) 205

Classic Load Balancer (CLB) 203, 204

Network Load Balancer (NLB) 206

rules 199

types 202

use cases 209, 210

Elastic Load Balancing (ELB) rules

conditions 199

host-based routing rules 201

listener rule 200

path-based routing rules 201, 202

priorities 200

query string rules 202

target group rules 200, 201

target groups 200

Elastic Map Reduce (EMR) 181

Elastic Map Reduce File System (EMFRS) 358

Elastic Network Interface (ENI) 480

electronic design automation (EDA) 190

ELK stack 525

EMR file system

Elastic Map Reduce File System (EMRFS) 358

Hadoop Distributed File System (HDFS) 358

local file system 358

EMR Managed Scaling 357

EMR Studio 359

benefits 359

end-to-end ML pipeline 433

end-to-end ML pipeline, implementing with AWS SageMaker services

data ingestion 440

data preparation 440

model building 440

model deployment 440

real-time invocation 440

Enhanced Fan-Out (EFO) 382

Enterprise Service Bus (ESB) 385

EventBridge

creating 595, 596

reference link 325

event-driven architecture (EDA) 513, 514

benefits 520

communication simplicity 521

consumers 515

decoupling 522

disadvantages 522

dynamic targeting 521

EDA models 516

events 514

no polling mechanism 520

producers 515

scalability 522

events 514

examples 514

event streaming model 516, 517

architecture 517

example scenario 518

Extensible Markup Language (XML) 245, 405

ExternalDNS 496

Extract, Transform, and Load (ETL) 363, 394

F

Factorization Machines 437

failover routing policy 123

feature engineering 436

federated learning 430

Field-Programmable Gate Array (FPGA) 189

Fluentd 496

Fortinet 139

function-as-a-service (FaaS) 74, 180

Functional Technical Review (FTR) 44

G

Gateway Load Balancer (GWLB) 206, 207

general AI 429

General Data Protection Regulation (GDPR) 305, 559

General Purpose instances

A1 instances 187, 188

M family instance 187

T family instance 186, 187

geolocation routing policy 123

geoproximity routing policy 123

Global Secondary Index (GSI) 243

versus LSI 243

Glue Schema Registry (GSR) 389

gp3 volume 147

Graph databases 250, 251

Amazon Neptune 252

edges 251

nodes 251

Greengrass Core 452

Greengrass Discovery 452

Gremlin 251

Gzip 416

H

Hadoop

reference link 354

Hadoop Distributed File System (HDFS) 358

Hard Disk Drives (HDDs) 144

Hardware Security Modules (HSMs) 301, 302

Health Insurance Portability and Accountability Act (HIPAA) 301, 305

Helm 496

High Performance Computing (HPC) 44, 214

using, scenarios 214

High-Risk Issues (HRIs) 31

Horizontal Pod Autoscaler (HPA) 493

host-based routing rules 201

hybrid cloud connectivity

building, in AWS 128-134

hybrid compute 215, 216

AWS Outposts 216-218

VMware Cloud (VMC) on AWS 218

hybrid storage

building, with AWS Storage Gateway 172

hypervisor 23

I

IAM permissions 283

identity-based policies 285

resource-based policies 285

IAM policies 282

example 283, 284

inline policies 283

managed policies 283

IAM policy evaluation

reference link 288

IAM roles 280-282

IAM user groups 278, 279

IAM users 278

setting up 586-589

identity 271

Identity and Access Management (IAM) 346, 360, 553

identity-based policies 285

Industrial Internet of Things (IIoT) 455

Inferentia 432

Infrastructure as a Service (IaaS) 65, 498

advantages 65

disadvantages 66

use cases 66, 67

versus PaaS 75

versus SaaS 75

infrastructure-as-code (IaC) 329

infrastructure protection 296

AWS Firewall Manager 296

AWS Shield 297

AWS Web Application Firewall 296

building 296

inline policies 283

In-Memory Database (IMDBs) 247, 248

Amazon ElastiCache 248, 249

input/output operations per second (IOPS) 143

Institute of Internal Auditors (IIA) 318

integrated software vendor (ISV) 139

Internet Control Message Protocol (ICMP) 113

Internet of Things (IoT) 73, 447, 448

Internet of Things (IoT) applications

building, in AWS 448, 449

Internet Service Providers (ISPs) 133

io2 Block Express volumes 147

Istio 496

J

JavaScript Object Notation (JSON) 245, 405

Job, in Kubernetes 485

K

Karpenter 494

Cloud Provider 494

customization 494

factors, considering 494

features 494

scalability 494

KDA, for Apache Flink

benefits 384

Keras 432

Key Management Service (KMS) 560

Kinesis Data Analytics (KDA) 383

Kinesis Data Analytics Studio 384

Kinesis Data Firehose (KDF) 383

Kinesis Data Streams (KDS) 382

K-Means 437

kubectl 486

Kubernetes 482

advantages 486-488

benefits 483

cloud-agnostic deployments 487

components 484

examples 483

functionality 483

versus Docker Swarm 489

Kubernetes application scaling

Cluster Autoscaler 493

Horizontal Pod Autoscaler (HPA) 493

Vertical Pod Autoscaler (VPA) 493

Kubernetes components

DaemonSet 484

Deployment 484, 485

Job 485

kubectl 486

Labels 485

Pod 484

ReplicaSet 485

Service 485

Kubernetes Dashboard 496

Kured 496

L

Labels, in Kubernetes 485

lakehouse architecture

implementing, steps 569

in AWS 568, 569

versus data lake 572, 573

versus data mesh architecture 572, 573

Lambda function

deploying 607-612

Landing Zone Accelerator (LZA) 316

language

selecting, considerations 580, 581

latency routing policy 123

Launch VPC Wizard 112

layered architecture 510-512

business layer 512

data access layer 512

layers, troubleshooting 513

presentation layer 511

lazy caching 248

leader node 356

ledger database (LDB) 254, 255

Amazon Quantum Ledger Database (QLDB) 255

lift and shift method 79

limited memory AI 429

Linear Learner 437

Linkerd 496

listener rule 200

local file system 358

Local Secondary Index (LSI) 242

versus GSI 243

Local Zones (LZs) 106

logging and monitoring

best practices 617

setting up 615, 616

loosely coupled architecture 465

loosely coupled system 506

M

Machine Learning (ML) 394, 428

in AWS 430

Machine Learning (ML), trends using AWS

automated ML 430

federated learning 430

reinforcement learning 430

serverless ML 430

transfer learning 430

Machine Learning (ML), types

deep learning 428

reinforcement learning 428

semi-supervised learning 428

supervised learning 428

transfer learning 428

unsupervised learning 428

Machine Learning Operations (MLOps)

used, for building ML best practices 446, 447

managed policies 283

Managed Streaming for Kafka (MSK) 181

Managed Workflows for Apache Airflow (MWAA) 359, 369

Master Data Management (MDM 74

Mean Time Between Failures (MTBF) 32

Mean Time To Repair (MTTR) 33

Memory Optimized instances

High Memory instances 190

R family instance 190

X1 and X2 instances 190

microservice architectures 506, 509

API Gateway 509

Aurora 510

ECS 510

event-driven architecture (EDA) 513, 514

layered architecture 510

versus monolithic architecture 508

microservices 506

best practices 523-532

layered architecture 511, 513

ML best practices

building, with Machine Learning Operations (MLOps) 446, 447

ML data preparation 436

ML frameworks and infrastructure 430

ML model

building 437, 438

deploying, in production 439, 440

monitoring 439, 440

training 438

tuning 438

ML pipeline, stages

business use case 433

data engineering 433

data preparation 434

model deployment 434

model evaluation 434

model training 434

ML services 430

Model/View/Controller (MVC) pattern 507

multi-factor authentication (MFA) 589

multivalue answer routing policy 123

N

Narrow AI 429

natural language processing (NLP) 423, 443

natural language query (NLQ) 423

Network Access Control Lists (NACLs) 480

versus SG 136

Network Attached Storage (NAS) 67, 150

Network File System (NFS) 148

networking modes, ECS

awsvpc networking mode 480

bridge mode 479

host mode 479

none mode 480

task networking 480

Network Load Balancer (NLB) 206

versus ALB 207

versus CLB 207

network security solutions, AWS Marketplace

reference link 140

Neural Topic Model 437

Nitro Enclaves

reference link 185

Nitro hypervisor

reference link 185

node type

core node 356

leader node 356

task node 356

node types, Redshift

Dense Compute (DC) node types 399

Dense Storage (DS) node 400

RA3 node types 399

non-tech AWS cloud career 47

NoSQL databases 222, 239

Amazon Dynamo DB 240

API operations 240

DocumentDB 244

no upfront payments (NURI) 350

O

Object-Oriented Analysis and Design (OOAD) 534

Object-Oriented Programming (OOP) 532, 533

Object Relational Mappers (ORMs) 245

online courses, for AWS

A Cloud Guru 54

books 55

Udemy courses 55

YouTube videos 55

Online Transaction Processing (OLTP) Systems 227

Open Container Initiative (OCI) 482

OpenShift 499

Optimized Row Columnar (ORC) files 405

ORDER BY clause optimization

computed column, using 420

LIMIT clause, using 420

sort key, using 419

order context

writing 603-607

Out-of-Memory (OOM) 374

P

Palo Alto Networks 139

ParallelCluster 215

partial up-front (PURI) 350

Passive Node 97

path-based routing rules 201, 202

Payment Card Industry Data Security Standard (PCI DSS) 305

persistent cluster 357

Personally Identifiable Information (PII) 72, 559

Platform-as-a-Service (PaaS) 71, 486

advantages 72

disadvantages 72, 73

use cases 73, 74

versus IaaS 75

versus SaaS 75

Pod , Kubernetes 484

point-in-time recovery 235

Points of Presence (PoP) 160

practice exam websites

AWS practice question sets 56

BrainCert 57

Tutorials Dojo 57

Whizlabs 56

Presto 408

PrestoDB 408

private cloud

versus public clouds 5, 6

PrivateLink 495

producers 515

Professional-level certifications 59

Prometheus 496

publish and subscribe model 518, 519

example scenario 520

purchase orders (POs) 347

purchasing methods, AWS compute

On-Demand 191

Reserved Instance (RI) 192

Savings Plan 192

Spot Instances 192

PyTorch 432

Q

quantum computing 458

use cases 459

with AWS Braket 458, 460

query string rules 202

R

RA3 node types 399

Random Cut Forest 437

reactive machines 429

Recovery Point Actual (RPA) 102

Recovery Point Objective (RPO) 101

Recovery Time Actual (RTA) 102

Recovery Time Objective (RTO) 101

Red Hat OpenShift Service on AWS (ROSA) 499

private cluster architecture 500

Redshift Advisor 400

Redshift Concurrency Scaling 400

Redshift federated queries 400

Redshift Managed Storage (RMS) 399

Redshift Query Editor 400

Redshift Spectrum 402

versus Amazon Athena 421, 422

redundancy 96

reinforcement learning 428, 430

Relational Database Management Systems (RDBMSs) 222

relational databases 230

Amazon RDS 230, 231

Relational Database Service (RDS) 71, 108

ReplicaSet 485

Reserved Instances 345

resource-based policies 285

Resource Description Framework (RDF) 252

RESTful APIs 526

role-based access management (RBAC) 560

rollback

planning 614

Route 53 122

routing policies 123

S

S3DistCP 416, 417

reference link 417

S3 Glacier Deep Archive 154

S3 Glacier Flexible Retrieval 154

S3 Glacier Instant Retrieval 155

S3 Object Lambda

data, managing with 156

S3 Standard 150-152

SageMaker Automatic Model Tuning 438

SageMaker Autopilot 437

SageMaker Endpoints 439

SageMaker JumpStart 437

SageMaker Model Monitor 439

SageMaker Projects 439

scaling out 16

scaling up 16

Schema Conversion Tool (SCT) 266

Secure Sockets Layer (SSL) 360

security audit services 293

Amazon CloudWatch 294

Amazon VPC Flow Logs 293

AWS CloudTrail 293

AWS Config 293

security controls

applying 293

security control services

Amazon GuardDuty 293-295

Amazon Inspector 293, 296

AWS Security Hub 293

semi-supervised learning 428

Sendbird 70

serverless computing

with AWS Fargate 212, 213

with AWS Lambda 211

serverless ML 430

serverless web-application architecture 578

server message block (SMB) 149

Server-Side Encryption

AWS Key Management Service (SSE-KMS) 167

with Amazon S3-Managed Keys (SSE-S3) 167

with Customer-Provided Keys (SSE-C) 167

Server-Side Encryption (SSE) 300

Service Consumer 120

Service Control Policy (SCP) 286

Service Level Agreements (SLAs) 75, 476

Service Provider 119

services

setting up 581

SG

versus NACL 135

sharding architecture 99, 100

shared responsibility model 271-274

Simple Notification Service (SNS) 239, 346, 369

Simple Queue Service (SQS) 369

simple routing policy 123

Simula 533

Single Sign-On (SSO) 359, 561

Snappy 416

software-as-a-service (SaaS) 67, 531

advantages 68

characteristics 67

disadvantages 68

use cases 69

versus IaaS 75

versus PaaS 75

Spark UI

reference link 375

Specialty certifications 60

Speech Synthesis Markup Language (SSML) 442

Splunk 70

SQS queue

creating 595, 596

Standard Query Language (SQL) 10

stateless architecture 465

Storage Area Network (SAN) 67, 150

storage modes, ECS

Amazon Elastic File System (EFS) storage 480

ephemeral storage 480

Storage Optimized instances 190

H1 and D3 instance types 191

Structured Query Language (SQL) 222, 228

Super-fast, Parallel, In-memory, Calculation Engine (SPICE) 423

supervised learning 428

Swagger 529

URL 529

systemic weaknesses 102

T

Tab-Separated Values (TSV) 367

Tape Gateway 175

target group rules 200, 201

task node 356

TensorFlow 432

test-driven development (TDD) 542

third-party SaaS solutions

examples 70

three-phase migration process

assessment phase 76

migrate and modernize phase 77

mobilize phase 77

time-series database (TSDB) 252, 253

Amazon Timestream 253, 254

tolerance 101

total cost of ownership (TCO) 82, 211

transfer learning 428, 430

transient cluster 357

Transit Gateway (TGW) 116

Tutorials Dojo

reference link 57

twelve-factor design 531

factors 532

reference link 532

Twilio 70

U

Udemy courses 55

Uninterruptable Power Supplies (UPSes) 23

unsupervised learning 428

V

Vertical Pod Autoscaler (VPA) 493

virtual interfaces (VIFs) 131

virtualization 467, 469

Virtual Machine Monitors (VMMs) 23

virtual machines (VMs) 469

versus containers 470-472

Virtual Private Cloud (VPC) 208, 360, 480, 618

Virtual Private Network (VPN) 185

VMware Cloud (VMC)

on AWS 218, 219

use cases 218, 219

Volume Gateway 175, 176

W

weighted routing policy 123, 124

Well-Architected Framework pillars 28, 29

cost optimization 37-39

operational excellence 39-41

performance efficiency 35-37

reliability 31-35

security 29, 31

security, architectural principles 30

sustainability 41, 42

Well-Architected lenses 43-45

Data Analytics Lens 43

Hybrid Networking Lens 43

Internet of Things (IoT) Lens 43

Machine Learning (ML) Lens 43

Serverless Applications Lens 43

Well-Architected Review (WAR) 27, 28

benefits 28

pillars 28

using, for optimization 618, 619

Whizlabs

reference link 56

wide-column store databases

Amazon Keyspaces (for Apache Cassandra) 257

using 256

Write Once Read Many (WORM) 166

write-through 248

X

XGBoost 437

Y

Yet Another Resource Negotiator (YARN) 359, 374

Z

zero trust 586